Skip to main content

serverlog emails sent to wrong address

Comments

8 comments

  • cPRex Jurassic Moderator
    Hey there! Is this the main server contact email in WHM >> Basic WebHost Manager Setup? That would be the most likely place where that is configured.
    0
  • tinodesigns
    That mail ( Basic WebHost Manager Setup ) is set to be serverlog@servername.com which would be correct. But emails are going to serverlog@host.servername.com.
    0
  • cPRex Jurassic Moderator
    Are these cPanel notifications? If so, can you point out a specific notification where this is happening?
    0
  • tinodesigns
    I think it is WHM but I'm unsure since I'm not able to get the email. All infos I have are:
    Event: success alt="success">https://host.cowebserver.com:2087/cPanel_magic_revision_0/cjt/images/icons/success.png
    Sender User: root
    Sender Domain:
    From Address: root@host.serverdomain.com
    Sender: root
    Sent Time: Oct 24, 2022, 6:53:18 PM
    Sender Host: localhost
    Sender IP: 127.0.0.1
    Authentication: localuser
    Spam Score:
    Recipient: root@host.serverdomain.com
    Delivered To: serverlog@host.serverdomain.com
    Delivery User: serverlog
    Delivery Domain:
    Router: virtual_user
    Transport: dovecot_virtual_delivery
    Out Time: Oct 24, 2022, 6:53:18 PM
    ID: 1on0hs-xxxxxx-Hz
    Delivery Host: localhost
    Delivery IP: 127.0.0.1
    Size: 1.15 KB
    Result: Accepted
    However the mails are nowhere found. and serverlog@host.serverdomain.com does not exist.
    0
  • tinodesigns
    I'm trying to figure out what exactly is sending these. Is it possible to setup serverlog@host.serverdomain.com somehow maybe be able to receive those? Also why don't they bounce back?
    0
  • cPRex Jurassic Moderator
    Thanks for that information - can you run this command on the server to get the full email transaction so we can see where this is coming from? grep 1on0hs-xxxxxx-Hz /var/log/exim_mainlog
    0
  • tinodesigns
    Thanks a lot for that command, it seems to be lfd as well. (Couldn't post the output here, getting an posting error but I was abel to find it that way. When I started this thread earlier I cleaned out the serverlog@serverdomain.com email domain. The mails I just searched for can now be found. So it seems the mailbox was most likely full and not accepting all new mails? Anyway I think I'll be able to figure this out now using the command you gave me.I can get the emails through the mailbox directly now. Seem to be mainly lfd blocks. Thanks a lot, Tino
    0
  • cPRex Jurassic Moderator
    I'm glad that helped to point you in the right direction!
    0

Please sign in to leave a comment.